
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
File: 11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa (raw, json)
Hash identifier: V0om4a4+x22G1wm+S1bC06IG8siIkRXM0TIM9yJPnv4=
Subject key identifier: 52:02:08:43:CC:0C:14:3A:02:E2:15:9F:B6:59:EF:0F:42:E6:8E:3B
Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Certificate serial: 010D0C9F4328584F093CEAA270F2D7C9E07AFDD0
Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 10967
IP address blocks: 165.130.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:ea:a2:70:f2:d7:c9:e0:7a:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=1c3a09d8-fe2c-4cae-9dd8-692fcdc6a7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:8e:85:22:56:17:12:4a:c7:d0:91:eb:80:
41:ee:26:9e:d9:89:c7:c0:8a:94:9e:6c:07:ab:95:
62:4a:6f:3d:66:92:c0:55:2a:e3:98:20:7a:de:05:
c5:10:e5:68:cb:77:3e:06:13:a8:47:66:d0:9f:b7:
64:19:3b:c3:6d:4a:f8:63:19:0e:85:45:13:18:66:
25:b3:2a:27:85:60:b1:eb:63:52:b9:d9:be:3b:ec:
52:89:ff:4f:26:61:53:b5:e6:e1:31:09:3f:c5:d0:
39:50:5b:9b:27:1b:19:03:28:29:c8:d5:c9:00:7f:
cf:70:6f:8d:4d:41:10:83:31:3f:6d:0b:a2:a1:86:
21:36:de:7c:fc:f2:ff:40:81:ab:a6:bb:30:48:be:
32:55:81:e2:c0:03:c8:3d:e3:92:b1:0d:d4:cb:99:
64:3b:b3:80:e7:7f:a8:d9:fa:c0:19:09:11:eb:d6:
8a:8c:3c:30:10:e0:b6:b3:0f:b1:59:78:a3:83:97:
eb:ed:9a:eb:f4:63:31:55:a5:4b:64:cc:ef:f2:75:
50:05:47:c7:09:b1:73:6a:11:47:53:cf:a4:67:7e:
8b:cd:00:11:85:12:85:89:28:8a:15:78:9a:52:c2:
c9:43:5f:68:43:4c:4b:95:46:d8:5a:f4:98:0a:4a:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:08:43:CC:0C:14:3A:02:E2:15:9F:B6:59:EF:0F:42:E6:8E:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl
X509v3 Authority Key Identifier:
keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
sbgp-ipAddrBlock: critical
IPv4:
165.130.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6b:e8:80:c7:a1:ba:7a:ae:44:5d:0f:c1:90:0e:76:9d:df:
60:44:d0:02:ff:a6:b9:bf:16:73:7c:91:de:3e:02:25:2d:10:
10:12:60:5d:55:af:ed:3b:05:d0:2a:d1:cd:f4:b1:24:34:8e:
70:98:94:4b:94:5a:15:e4:33:01:a1:ae:14:67:2b:19:67:7b:
2c:e9:16:0d:b6:d9:2d:c4:f5:92:a1:43:d2:c5:7f:7f:f5:6a:
fb:89:ee:aa:17:b4:9c:18:61:30:f2:2a:76:fd:8e:32:09:73:
23:a5:90:04:ea:5f:71:e3:b2:f2:ea:c2:87:6a:be:6f:16:b5:
86:82:b6:e2:d9:6b:09:6a:b0:17:d8:58:03:3b:8c:3d:96:80:
a2:35:6c:88:72:59:1f:fa:5f:3d:65:12:66:6f:74:e2:03:9a:
a2:f8:78:2a:5b:2e:4d:d2:dc:05:41:d7:2f:72:28:77:42:86:
eb:41:ca:8f:cd:13:c8:7c:b8:b5:6a:41:a2:22:e1:1e:38:2c:
5f:b9:19:4a:70:84:91:0a:35:53:d9:32:80:9a:eb:4b:aa:31:
cf:03:b1:91:ef:f5:5c:14:2c:11:53:74:40:c0:89:f0:a6:b4:
82:ff:89:1d:b9:c4:39:82:59:d6:22:08:7d:27:28:bf:a9:66:
b3:c5:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:56:23 2026 by rpki-client